Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
535 Cisco 500 Series Stackable Managed Switch Administration Guide
23
To attach this policy to an interface:
• Attach Policy to VLAN—Click to jump to Policy Attachment (VLAN) page
where you can attach this policy to a VLAN.
• Attach Policy to Interface—Click to jump to Policy Attachment (Port)
page where you can attach this policy to a port.
Neighbor Binding Settings
The Neighbor Binding table is a database table of IPv6 neighbors connected to a
device is created from information sources, such as Neighbor Discovery Protocol
(NDP) snooping. This database, or binding, table is used by various IPv6 guard
features to prevent spoofing and redirect attacks.
Use the Neighbor Binding Settings page to enable the Neighbor Binding feature on
a specified group of VLANs and to set the global configuration values for this
feature. If required, a policy can be added or the system-defined default Neighbor
Binding policies can be configured in this page.
To configure Neighbor Binding:
STEP 1 Click Security > IPv6 First Hop Security > Neighbor Binding Settings.
STEP 2 Enter the following global configuration fields:
• Neighbor Binding VLAN List—Enter one or more VLANs on which
Neighbor Binding is enabled.
• Device Role—Displays the device global default role (Perimeter).
• Neighbor Binding Lifetime—Enter the length of time that addresses
remain in the Neighbor Bindings table.
• Neighbor Binding Logging—Select to enable logging of Neighbor Binding
table main events.
• Address Prefix Validation—Select to enable IPv6 Source Guard validation
of addresses.
Global Address Binding Configuration:
• Binding from NDP Messages—To change the global configuration of
allowed configuration methods of global IPv6 addresses within an IPv6
Neighbor Binding policy, select one of the following options:
To Next Page
Loading...
